$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: sS9vAOP8a4HwJSPg0F4KGx7YA80oBwV+3MUipzShb1E= Subject key identifier: FF:A4:4F:7B:E4:65:CC:62:2F:6E:9F:5B:C0:D3:33:DA:5E:C6:BC:37 Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: 012A Signing time: Fri 25 Apr 2025 03:50:47 +0000 Manifest this update: Fri 25 Apr 2025 03:50:46 +0000 Manifest next update: Fri 02 May 2025 03:50:46 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: bwfeSri+nSFq71Rcrw9Bf4eAZP4gDu+lFv3hd/DbQzQ=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Apr 25 03:50:46 2025 GMT Not After : May 2 03:50:46 2025 GMT Subject: CN=680b0697-8dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:9e:b1:c9:fb:d7:20:61:63:be:0b:0c:8d: 0d:7b:8b:fd:a9:8c:f9:32:d2:34:7b:c4:aa:ee:87: f5:9f:bb:b1:a3:b1:93:23:7c:76:67:db:90:1b:62: c5:8f:5e:f4:18:b3:77:ec:82:a3:da:37:24:88:06: 6c:76:73:25:2f:d6:7b:f0:b4:ab:a2:23:b5:39:69: c2:4b:ba:5a:eb:a4:d4:c4:ba:eb:af:0d:f0:e8:77: a1:03:6b:c1:f7:52:73:98:91:6b:f8:77:cc:d2:8f: 2e:22:7b:83:36:c8:8a:54:2a:c4:e1:08:c2:f2:6c: e1:55:80:7e:81:88:9c:1b:4d:a8:9c:9d:64:1c:aa: 1c:95:52:ad:b7:9d:e6:f4:26:18:c0:88:5c:f8:f4: 80:89:7e:23:47:2b:5b:ee:d1:f1:1d:40:24:8a:c5: e1:24:69:47:35:b3:be:bb:bc:04:ec:05:ef:89:9d: 81:1e:03:28:88:3c:87:e1:fe:75:b8:59:1e:b2:e9: d2:3a:41:15:0b:a4:1e:c7:3e:7a:a5:e2:15:e6:d7: c6:bc:2c:a7:e3:b7:0f:fe:34:cd:9c:8e:05:57:e4: 68:39:bd:00:42:ee:a8:0e:25:3e:0e:6b:ed:d4:f5: 20:75:e9:b7:9a:bb:7a:2a:2c:c5:85:07:d3:0f:29: 7e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A4:4F:7B:E4:65:CC:62:2F:6E:9F:5B:C0:D3:33:DA:5E:C6:BC:37 X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:08:cb:66:ed:3a:3f:5d:f8:20:bf:af:06:56:5c:a7:a6: 7b:78:e0:9b:e0:91:82:f2:3a:44:7b:08:fc:06:c3:f2:60:4f: af:8f:ee:c6:ed:56:3e:21:d0:e2:36:26:00:ce:98:47:96:87: db:c3:fd:d5:96:96:a9:0e:45:02:96:4d:ef:b4:d8:40:dc:ae: 6a:20:09:20:c7:82:cb:2c:16:51:38:4f:70:11:f8:42:f2:3e: 48:01:e4:e7:ed:46:21:0f:09:92:d3:8a:5b:a7:28:4a:b3:d8: 08:ec:1b:5e:18:84:fa:5d:c4:16:f2:15:78:8c:fc:8e:a8:a7: 1c:40:64:26:55:a6:29:0d:d8:23:38:cf:a9:c1:1a:f7:00:f7: 3a:48:45:c0:73:c5:6e:d7:ba:cb:ff:ce:72:fb:6d:3d:12:e5: 8e:63:18:4f:5c:b3:4d:84:d7:12:18:67:ee:82:67:c3:fc:ef: 1c:fd:3e:ad:4d:a4:e3:30:b6:63:c8:fe:50:df:98:03:a7:d4: e4:a1:8d:e9:54:e5:1a:87:52:aa:05:50:97:04:ae:ba:74:01: 99:7d:94:14:38:79:a3:3c:1e:53:31:d8:83:3c:b4:b3:5c:7d: 68:43:e1:b8:62:53:f8:4f:83:1b:96:2b:f8:ff:21:4b:7a:d0: c0:df:f3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjUwNDI1MDM1MDQ2WhcNMjUwNTAyMDM1MDQ2WjAYMRYwFAYD VQQDEw02ODBiMDY5Ny04ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslGescn71yBhY74LDI0Ne4v9qYz5MtI0e8Sq7of1n7uxo7GTI3x2Z9uQG2LF j170GLN37IKj2jckiAZsdnMlL9Z78LSroiO1OWnCS7pa66TUxLrrrw3w6HehA2vB 91JzmJFr+HfM0o8uInuDNsiKVCrE4QjC8mzhVYB+gYicG02onJ1kHKoclVKtt53m 9CYYwIhc+PSAiX4jRytb7tHxHUAkisXhJGlHNbO+u7wE7AXviZ2BHgMoiDyH4f51 uFkesunSOkEVC6Qexz56peIV5tfGvCyn47cP/jTNnI4FV+RoOb0AQu6oDiU+Dmvt 1PUgdem3mrt6KizFhQfTDyl+OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+kT3vk ZcxiL26fW8DTM9pexrw3MB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMgjLZu06P134IL+vBlZcp6Z7eOCb4JGC8jpEewj8BsPyYE+vj+7G 7VY+IdDiNiYAzphHlofbw/3VlpapDkUClk3vtNhA3K5qIAkgx4LLLBZROE9wEfhC 8j5IAeTn7UYhDwmS04pbpyhKs9gI7BteGIT6XcQW8hV4jPyOqKccQGQmVaYpDdgj OM+pwRr3APc6SEXAc8Vu17rL/85y+209EuWOYxhPXLNNhNcSGGfugmfD/O8c/T6t TaTjMLZjyP5Q35gDp9TkoY3pVOUah1KqBVCXBK66dAGZfZQUOHmjPB5TMdiDPLSz XH1oQ+G4YlP4T4Mbliv4/yFLetDA3/MT -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:56 2025 by rpki-client